[pca] forcing https? (UNCLASSIFIED)

[Martin Paul]

Michael,

Am 17.01.2013 00:02, schrieb Gale, Michael D CTR (US):
> But at the end, the session redirects to http://aru-akam.oracle.com and I get a connection refused.
>
> Any suggestions on how to keep all the connections on https?  One of the requirements was for us to use only https.

Unfortunately PCA can't help you with that - it's Oracle's fault.

Background: Downloading a patch from Oracle is a rather complicated 
procedure. If you take a close look at PCA's debug output, you'll see 
that it tries to download the patch via wget from this URL:

   https://getupdates.oracle.com/all_unsigned/147440-27.zip

The Oracle server redirects wget to another server:

   https://login.oracle.com/pls/orasso...

And then another redirection to:

   https://updates.oracle.com/osso_login_success?...

Following is a redirection to the original URL:

   https://updates.oracle.com/all_unsigned/147440-27.zip

And then to the final URL (which is http, not https):

   http://aru-akam.oracle.com/adcarurepos/...

PCA - or better wget - can do nothing but to follow this chain of URLs.

I assume you get "Connection failed" because you don't allow outgoing 
HTTP connections in your firewall? See Document ID 1199543.1 in the 
Oracle knowledge base for a description of the required firewall 
exceptions when using wget to download patches.

Martin.